Getting Started

Set Up the Input and Error Logs Locations

To set up the input and error logs locations, perform the following steps:

1. Create an Amazon S3 bucket. For instructions, refer to the Amazon S3 documentation:

   https://docs.aws.amazon.com/AmazonS3/latest/userguide/create-bucket-overview.htmlOpens in a new tab

2. Create two folders within the S3 bucket, one for input and one error logs. For example:

   s3://Transformation/in/
   s3://Transformation/logs/
   

Set Up the Target Location

To set up the target location, choose between Amazon HealthLake and Amazon S3. Perform the following steps for the service you chose.

Creating an AWS IAM Policy for Accessing the Input Location, Error Logs Location, and Target Location

In the AWS IAM console, a policy defines a set of permissions that you can assign to a user, group, or role. To enable HealthShare Message Transformation Services to interact with the input location, error logs location, and target location, you must create a new policy with appropriate permissions.

To get started, see these example policies:

• AWS IAM Policy Example: Amazon S3 Input and Amazon S3 Target

• AWS IAM Policy Example: Amazon S3 Input and Amazon HealthLake Target

For detailed instructions on creating a new policy, refer to the AWS IAM documentation:

https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_create.htmlOpens in a new tab

AWS IAM Policy Example: Amazon S3 Input and Amazon S3 Target

The following Amazon IAM policy grants access to an Amazon S3 bucket containing the input, error, and target locations:

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "healthshare0",
            "Effect": "Allow",
            "Action": [
                "s3:PutObject",
                "s3:GetObject",
                "s3:ListBucket",
                "s3:DeleteObject",
                "s3:GetBucketLocation"
            ],
            "Resource": [
                "arn:aws:s3:::<bucket-name>",
                "arn:aws:s3:::<bucket-name>/*"
            ]
        }
    ]
}

To use this example, replace <bucket-name> with the name of your Amazon S3 bucket. For instance, if your input location is s3://Transformation/in/, the corresponding section of the policy would look like:

"Resource": [
    "arn:aws:s3:::Transformation",
    "arn:aws:s3:::Transformation/*",
]

AWS IAM Policy Example: Amazon S3 Input and Amazon HealthLake Target

The following Amazon IAM policy grants access to an Amazon HealthLake data store target location and an Amazon S3 bucket containing the input and error locations:

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "healthshare0",
            "Effect": "Allow",
            "Action": [
                "healthlake:CreateResource",
                "healthlake:ReadResource",
                "healthlake:DeleteResource",
                "healthlake:SearchWithGet",
                "healthlake:SearchWithPost",
                "healthlake:UpdateResource",
                "healthlake:GetCapabilities"
            ],
            "Resource": [
                "arn:aws:healthlake:<region>:<account_id>:datastore/fhir/<datastore_id>"
            ]
        },
        {
            "Sid": "healthshare1",
            "Effect": "Allow",
            "Action": [
                "s3:PutObject",
                "s3:GetObject",
                "s3:ListBucket",
                "s3:DeleteObject",
                "s3:GetBucketLocation"
            ],
            "Resource": [
                "arn:aws:s3:::<bucket-name>",
                "arn:aws:s3:::<bucket-name>/*"
            ]
        }
    ]
}

To use this example, you must fill in the placeholder values. The placeholders are:

• <region> — The AWS region code for your HealthLake data store. For example, us-east-1.

• <account_id> — The twelve-digit account ID for the Amazon account that owns the data store. For example, 123456789123.

• <datastore_id> — The data store ID, which you can find in the Amazon HealthLake console. For example, 573dabaa35d8d0d92e5aa6aca4d5a3q3.

• <bucket-name> — The name of the Amazon S3 bucket you are using. For example, Transformation. This needs to be filled in twice in the example policy.

Provide HealthShare Message Transformation Services with Access to the AWS IAM Policy

Once you have created a policy that defines access to the input location, error location, and target location, you must allow HealthShare Message Transformation Services to use the policy. You may accomplish this using either of the following methods:

• Configure delegated (cross-account) access. This method requires the AWS User ARN that HealthShare Message Transformation Services provide when creating new cross-account credentials. For instructions, refer to the AWS IAM tutorial for delegating access (https://docs.aws.amazon.com/IAM/latest/UserGuide/tutorial_cross-account-with-roles.html#tutorial_cross-account-with-roles-1Opens in a new tab).

• Create an AWS IAM user with programmatic access. This method requires you to record the Access key ID and Secret Access Key of the user you create. For information about creating an AWS IAM user, refer to the AWS IAM users documentation (https://docs.aws.amazon.com/IAM/latest/UserGuide/id_users.htmlOpens in a new tab).

Create a New Account

After you sign up for HealthShare Message Transformation Services, InterSystems provides you with instructions for accessing your organization’s Sign Up page.

To create an account, perform the following steps:

1. Navigate to the URL provided by InterSystems.

2. Fill in the required fields.

3. Click Create Account.

Log In

After you create an account, you can log in to the services with the username and password that you specified for yourself.

To log into the services, perform the following steps:

1. Navigate to the URL for your organization’s Sign In page.

2. Enter your credentials.

3. Click Submit.

   The HealthShare Message Transformation Services home page appears and lists any existing transformation pipelines.

Try the Demo Tool

HealthShare Message Transformation Services includes a demo feature which you may use to gain a better understanding of how the transformation operates. The Demo Tool allows you to enter sample data into a text box and view the FHIR output.

To use the Demo Tool:

1. Click Demo Tool from the hamburger menu on the left side of the screen.

2. Select the sample data format from the Type of Message drop-down list.

3. Paste your sample data into the text box. Alternately, you may select Fill with Sample to populate the text box.

4. Click Transform to FHIR and review the Transformed Message preview that appears on the left side of the page.

5. Select one of the FHIR resources to view more information about that resource.

Change Display Name

You can change your display name, which is the name that appears in the top-right corner of the application, as follows:

1. In the top-right corner, click your display name.

2. Click View Profile.

3. Click Edit.

4. Modify the name fields as needed.

5. Click Save.

Change Password

You can change your password as follows:

1. In the top-right corner, click your display name.

2. Click View Profile.

3. Click Change Password.

4. Fill in the fields.

5. Click Confirm Password Change.